- Download
24.8 MB -
Visit Developer's Site
Gerald Combs
Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.
Wireshark has a rich feature set which includes the following:
Wireshark has a rich feature set which includes the following:
- Standard three-pane packet browser
- Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
- Multi-interface: Along with a standard GUI, Wireshark includes TShark, a
What's New
Version 1.10.6:
Bug Fixes
The following vulnerabilities have been fixed:
- The NFS dissector could crash. Versions affected: 1.10.0 to 1.10.5, 1.8.0 to 1.8.12
- The M3UA dissector could crash. Versions affected: 1.10.0 to 1.10.5
- The RLC dissector could crash. Versions affected: 1.10.0 to 1.10.5, 1.8.0 to 1.8.12
- The MPEG file parser could overflow a buffer. Versions affected: 1.10.0 to 1.10.5, 1.8.0 to 1.8.12
- Customized OUI is not recognized correctly during dissection.
- Properly decode CAPWAP Data Keep-Alives.
- Build failure with GTK 3.10 - GTK developers have gone insane.
- SIGSEGV/SIGABRT during free of TvbRange using a chained dissector in lua.
- MPLS dissector no longer registers itself in "ppp.protocol" table.
- Tshark doesn't display the longer data fields (mbtcp).
- DMX-CHAN disector does not clear strbuf between rows.
- Dissector bug, protocol SDP: proto.c:4214: failed assertion "length >= 0".
- False error: capture file appears to be damaged or corrupt.
- SMPP field source_telematics_id field length different from spec.
- Lua: bitop library is missing in Lua 5.2.
- GTPv1-C / MM Context / Authentication quintuplet / RAND is not correct.
- Lua: ProtoField.new() is buggy.
- Lua: ProtoField.bool() VALUESTRING argument is not optional but was supposed to be.
- Problem with CAPWAP Wireshark Dissector.
- nas-eps dissector: CS Service notification dissection stops after Paging identity IE.
Version 1.10.6:
Bug Fixes
The following vulnerabilities have been fixed:
- The NFS dissector could crash. Versions affected: 1.10.0 to 1.10.5, 1.8.0 to 1.8.12
- The M3UA dissector could crash. Versions affected: 1.10.0 to 1.10.5
- The RLC dissector could crash. Versions affected: 1.10.0 to 1.10.5, 1.8.0 to 1.8.12
- The MPEG file parser more...
Requirements
- Intel
- OS X 10.6 or later
(11)
(12)
Displaying 1-10 of 17
-
-
-
Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.
Wireshark has a rich feature set which includes the following:
Wireshark has a rich feature set which includes the following:
- Standard three-pane packet browser
- Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
- Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
- The most powerful display filters in the industry
- VoIP analysis
- Live capture and offline analysis are supported
- Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
- Capture files compressed with gzip can be decompressed on the fly
- Hundreds of protocols are supported, with more being added all the time
- Coloring rules can be applied to the packet list, which eases analysis
+1
Sorry, cut&paste gone wrong: You can find right ones here: "wiresharkdownloads.riverbed.com/wireshark/osx/"
+1
+1
+5
+9
When you start WireShark, it asks you to find X11. Navigate to Utilities folder and select XQuartz.
WireShark now freezes for a couple of minutes while it builds font caches - DON'T PANIC! Then the window appears.
-8
+62
In a few months, Wireshark will be unusable on up-to-date Macs.
+2
+15
-1
+369
+1
+62
+1
+62
+6
+680
+8
Thanks
-3
+2
Anon42 reviewed on 28 Mar 2012
+30
frequencydip reviewed on 04 Nov 2011
+7
JohnKHeath reviewed on 22 Oct 2011
-1277
+17
+1
+7
JohnKHeath reviewed on 05 Oct 2011
angelowales79 reviewed on 30 Sep 2011
Alain.devroye rated on 06 Nov 2013
Mac-Application rated on 27 Jul 2013
JaeyoonLee4930 rated on 11 Apr 2013
bluecheese rated on 16 Mar 2013
+3
Lachtigall rated on 02 Nov 2011
FAM9 rated on 03 Jun 2011